Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/vTyLxIp3Kkfv029AhbC2dGIu8bg.roa
File: vTyLxIp3Kkfv029AhbC2dGIu8bg.roa (raw, json)
Hash identifier: 1kruudxNN84Plt0MSBiuIknQ7fdwdTXy1CEYCT2fgPY=
Subject key identifier: BD:3C:8B:C4:8A:77:2A:47:EF:D3:6F:40:85:B0:B6:74:62:2E:F1:B8
Certificate issuer: /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial: 01898D03DB5550B8E9D86B3102A33F9B1769
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/vTyLxIp3Kkfv029AhbC2dGIu8bg.roa
Signing time: Tue 25 Jul 2023 12:26:27 +0000
ROA not before: Tue 25 Jul 2023 12:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 185.78.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:03:db:55:50:b8:e9:d8:6b:31:02:a3:3f:9b:17:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
Validity
Not Before: Jul 25 12:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd3c8bc48a772a47efd36f4085b0b674622ef1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:60:82:cf:ee:87:c8:77:cd:4b:6d:24:bc:69:
e4:b2:45:37:b1:ad:5a:2d:cb:7a:f5:70:3e:dc:39:
52:28:35:7e:ac:a3:1c:32:24:a0:36:ab:09:23:22:
0a:99:49:28:db:21:7e:ef:38:59:6c:8c:f1:93:bb:
c3:a2:3f:13:ff:92:99:0c:3c:a9:f3:b5:5a:d9:1c:
6f:11:5e:af:a7:34:2f:0b:9c:c4:03:79:19:34:0c:
cd:33:72:f0:e5:6b:c4:b4:86:c8:56:7a:ab:e1:97:
b5:f6:0f:85:09:13:e9:22:cb:f5:b4:19:b9:86:34:
26:4f:a3:a9:6c:74:73:38:d4:98:e7:49:c7:72:87:
27:9b:cf:7e:d1:55:a9:1f:74:2c:58:32:a1:65:5f:
40:45:91:4f:f8:5c:88:f1:f9:db:a3:f8:13:b2:6b:
66:75:d8:3f:3c:c1:77:cc:d9:24:4d:00:45:37:bd:
68:eb:e5:6a:ce:b8:55:6a:ff:c0:84:28:30:39:40:
5d:85:b4:74:d7:50:e5:f5:51:60:cd:4e:43:d8:1a:
81:6d:9d:d9:0b:af:36:f2:22:a9:4e:f2:cf:f4:63:
7c:d3:d3:6d:52:f1:4c:0c:e4:14:21:48:c2:2b:38:
ac:c3:e6:e2:ab:03:12:9a:79:ac:ac:2c:55:8a:cc:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3C:8B:C4:8A:77:2A:47:EF:D3:6F:40:85:B0:B6:74:62:2E:F1:B8
X509v3 Authority Key Identifier:
keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/vTyLxIp3Kkfv029AhbC2dGIu8bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.76.0/24
Signature Algorithm: sha256WithRSAEncryption
11:8a:f0:b0:41:0b:23:5e:2a:d0:cf:cc:d1:5f:8c:47:7d:26:
9a:bc:27:39:c5:2f:ee:27:82:33:93:4c:36:61:08:51:a4:ef:
a4:95:1b:51:db:d4:da:29:ba:98:a5:f9:a1:ca:2d:30:71:72:
aa:0e:1e:52:19:59:e6:92:b4:b7:bc:36:90:2d:10:67:97:12:
15:be:89:86:2f:cb:42:3d:a3:5b:b1:1d:cc:0d:69:6b:36:bd:
53:09:9f:cb:0e:20:b0:1a:2d:60:9e:0b:49:09:37:4e:9f:d9:
95:d4:9a:aa:d6:9e:b9:5a:ed:46:4b:49:ed:02:65:03:90:88:
b5:2d:1b:9c:53:9c:9f:8f:17:ab:80:a3:55:48:cb:4f:c2:69:
07:5a:12:4b:73:30:8c:23:f7:84:8d:61:60:4d:54:14:b0:b9:
89:15:74:80:c3:9c:5b:13:9d:40:2e:fc:ef:76:25:78:22:d0:
b7:31:c4:2b:15:fc:81:25:b5:54:eb:ec:23:0a:9e:5f:c7:6f:
0a:70:96:86:1d:28:82:08:56:62:63:72:b6:12:61:2b:2b:64:
51:2b:36:bf:5b:75:99:40:77:26:40:78:07:71:03:ce:3b:71:
54:e5:92:83:11:6e:0a:24:4c:bf:ec:e1:e6:8a:67:a7:9b:73:
2b:6d:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:33 2024 by rpki-client on console-ams.rpki-client.org